$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wqL0GTfmp9buerYG3L8Tgd0fx14.roa File: wqL0GTfmp9buerYG3L8Tgd0fx14.roa (raw, json) Hash identifier: lRMw8ipy6us7Akj83R4j8Pk8u1RCnk6dd7EiACcGnD8= Subject key identifier: C2:A2:F4:19:37:E6:A7:D6:EE:7A:B6:06:DC:BF:13:81:DD:1F:C7:5E Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 397D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wqL0GTfmp9buerYG3L8Tgd0fx14.roa Signing time: Fri 22 Aug 2025 08:46:21 +0000 ROA not before: Fri 22 Aug 2025 08:46:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38841 IP address blocks: 118.232.201.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14717 (0x397d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 22 08:46:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C2A2F41937E6A7D6EE7AB606DCBF1381DD1FC75E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:d6:98:c8:95:e0:3e:52:33:23:9b:7b:fd: 25:5f:8a:34:5c:24:e4:8a:e7:70:02:58:72:b5:79: f0:2e:21:84:ba:77:41:15:e0:36:fd:65:0e:e6:8f: ef:46:13:45:fb:0d:d9:ea:bc:09:fa:da:4e:39:ae: e0:d0:0d:4e:97:7d:bd:43:39:03:b6:fd:41:52:c7: a5:b3:9e:54:60:21:6e:48:73:5e:86:b8:2e:23:fd: 53:fd:2b:63:f7:64:a6:75:80:e3:6e:16:b1:5c:5a: 2e:d7:e7:c4:ba:9b:ef:8e:b5:09:47:ef:36:a9:aa: 1f:b2:ad:a3:73:dc:6d:ed:97:70:77:ce:b5:f4:af: 13:77:48:62:ae:a8:eb:6d:8b:fc:a6:1e:68:24:5f: cc:e1:29:f8:0e:38:19:57:66:42:d7:e5:b6:88:ed: bc:42:68:bb:72:86:5c:f6:d3:18:fc:6a:8e:0f:a3: bb:d7:33:3e:b3:0a:06:2c:97:d4:80:d7:01:88:d1: e3:a7:cf:63:1f:53:ea:4e:e0:61:1d:d7:24:1b:72: c9:8e:e9:ef:6f:f3:d9:1c:ca:11:c7:25:57:d4:14: ef:a4:0b:1a:2a:0e:3a:cf:33:25:e7:ac:02:95:09: 1b:14:7e:f2:9c:75:9e:74:14:22:e6:c7:d4:a4:90: 25:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A2:F4:19:37:E6:A7:D6:EE:7A:B6:06:DC:BF:13:81:DD:1F:C7:5E X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wqL0GTfmp9buerYG3L8Tgd0fx14.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.232.201.64/26 Signature Algorithm: sha256WithRSAEncryption ae:97:28:70:93:10:d2:f0:0e:a2:60:42:1b:6f:dc:49:76:ef: 16:43:e6:25:de:c3:4e:f2:fb:e6:51:2f:79:4d:8f:ba:22:e5: e3:46:2f:ce:1c:f6:da:4f:e5:69:ca:13:ed:78:60:49:4c:f2: 3f:4c:fc:cf:a4:14:07:3d:87:a9:2d:fa:13:07:52:ac:9e:7f: 61:3e:9d:7a:5a:86:df:1f:9e:4d:1b:bc:be:0e:02:dd:74:c1: 94:0e:60:75:3f:53:50:fe:06:59:17:27:4b:bf:23:65:7b:9d: 6d:d6:32:42:a3:77:fe:4d:20:ab:51:b3:12:d5:24:c8:77:ab: db:5c:a1:d1:7b:4e:f6:9e:aa:c7:ce:c9:de:09:cf:7e:8a:88: 8d:9e:a0:fd:77:9b:11:c5:71:1a:f7:6c:15:b5:9c:d8:dc:f8: 95:72:8b:aa:b6:14:d2:75:2d:19:d5:bb:cd:d9:04:0a:59:9e: 2f:11:d3:aa:d9:bf:2d:33:c4:24:ef:10:5e:82:a1:78:b9:f6: 45:de:3b:d0:00:98:25:77:5a:04:40:60:42:4e:7a:97:5b:cc: e9:90:d5:3d:08:20:06:a1:6f:18:81:df:2c:6a:8d:87:4d:5f: bf:a7:ea:01:66:b2:6e:7a:88:3c:5c:96:f4:c3:60:dc:e9:73: 73:c5:99:34 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICOX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTA4MjIw ODQ2MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMyQTJGNDE5MzdFNkE3 RDZFRTdBQjYwNkRDQkYxMzgxREQxRkM3NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpL9aYyJXgPlIzI5t7/SVfijRcJOSK53ACWHK1efAuIYS6d0EV 4Db9ZQ7mj+9GE0X7DdnqvAn62k45ruDQDU6Xfb1DOQO2/UFSx6WznlRgIW5Ic16G uC4j/VP9K2P3ZKZ1gONuFrFcWi7X58S6m++OtQlH7zapqh+yraNz3G3tl3B3zrX0 rxN3SGKuqOtti/ymHmgkX8zhKfgOOBlXZkLX5baI7bxCaLtyhlz20xj8ao4Po7vX Mz6zCgYsl9SA1wGI0eOnz2MfU+pO4GEd1yQbcsmO6e9v89kcyhHHJVfUFO+kCxoq DjrPMyXnrAKVCRsUfvKcdZ50FCLmx9SkkCXLAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUwqL0GTfmp9buerYG3L8Tgd0fx14wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dxTDBHVGZtcDlidWVyWUcz TDhUZ2QwZngxNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ2 6MlAMA0GCSqGSIb3DQEBCwUAA4IBAQCulyhwkxDS8A6iYEIbb9xJdu8WQ+Yl3sNO 8vvmUS95TY+6IuXjRi/OHPbaT+VpyhPteGBJTPI/TPzPpBQHPYepLfoTB1Ksnn9h Pp16WobfH55NG7y+DgLddMGUDmB1P1NQ/gZZFydLvyNle51t1jJCo3f+TSCrUbMS 1STId6vbXKHRe072nqrHzsneCc9+ioiNnqD9d5sRxXEa92wVtZzY3PiVcouqthTS dS0Z1bvN2QQKWZ4vEdOq2b8tM8Qk7xBegqF4ufZF3jvQAJgld1oEQGBCTnqXW8zp kNU9CCAGoW8Ygd8sao2HTV+/p+oBZrJueog8XJb0w2Dc6XNzxZk0 -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:45 2025 by rpki-client